How to support an SP that accepts both http and https on IdP

[Nate Klingenstein]

Yes, exactly right.  You might also want to flag the https:// one with isDefault="true".

On Mar 26, 2013, at 22:36 , Yaowen Tu wrote:

Just to double check, are you saying that in the metadata we can list something like:

<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="http://localhost/SSO/SAML/ACS/Post" index="0"/>
<md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https:/localhost/SSO/SAML/ACS/Post" index="1"/>

And in each individual AuthnRequest,SP can decide which one to include in the request, and expect the IdP to respond to it, right?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130326/02f2d0f6/attachment-0001.html